Keep track of your users failed and successful logins.
Who changed the password? What was my original email address? When was my account disabled? Who-done-it?
Profile History to the rescue. All profile changes cataloged - without exception. Use this to comply with the EU GDPR which required sites to notify users of profile changes or face administrative fines (goes into effect 25 May 2018).